Ask the Expert

Set network user rights for Active Directory security

In an Active Directory environment, with Microsoft Windows XP Professional as the client, I need to control network user rights to prevent users from logging on to more than one machine at a time. Is there a Group Policy management option that controls how many active logons a user can have? Can I restrict this number to one and thus improve Windows network security?
You can manage network user rights only to restrict the workstations a user can log onto, not the number of workstations a user can be logged onto simultaneously. If your users don't move, you can restrict them to their own workstations and accomplish what you want, albeit indirectly. (Do this via the user's account tab within Active Directory Users and Computers; click the Log Onto button for more.) But if your users need to move around, I'm not aware of anything built into Windows that could restrict their number of simultaneous active logons.

This was first published in August 2007

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: